Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2oy3bxlMQFed9NtEMlp2GAT2k0.cer
File: b2oy3bxlMQFed9NtEMlp2GAT2k0.cer (raw, json)
Hash identifier: Fy9nNzAYZ8MlUofoq/+dzSVoBA8dUvGfkx7o9ddKQsU=
Subject key identifier: 6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F264E6E68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/b2oy3bxlMQFed9NtEMlp2GAT2k0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 81.90.176.0/22
IP: 2a0d:2ac0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683542474344 (0x9f264e6e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f6a32ddbc6531015e77d36d10c969d86013da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:b3:e0:19:53:c5:9b:96:6f:83:51:b2:59:
37:93:0b:f9:e1:49:1f:83:9e:bc:38:46:8f:1c:0b:
0f:4d:fa:34:0f:d2:e1:38:69:c9:ec:b3:3b:65:db:
e4:9e:76:c7:05:f5:65:2a:f5:39:3c:a9:6a:57:18:
fb:0f:3d:92:5d:5b:13:8c:a4:ed:3d:21:2f:26:02:
08:a0:84:2d:2e:8e:72:75:00:44:56:e9:44:88:4d:
c7:c1:e9:05:d8:e6:ce:0e:bc:c9:a5:d7:f5:ab:60:
3b:08:80:62:b4:e6:76:5a:a0:66:98:29:60:fa:57:
f6:18:e1:6a:4f:0f:95:b9:eb:bc:18:e0:2b:2d:9d:
11:60:22:be:57:ef:59:99:d8:8c:a7:00:98:c3:38:
28:e5:44:82:48:f0:cc:16:a9:5e:b6:9f:e7:f2:b9:
cc:ab:72:a6:a6:09:2f:0f:09:ba:38:c0:1a:a1:b3:
0e:33:d5:7c:ba:fe:e1:7b:53:92:62:23:d9:aa:b1:
73:cf:82:1f:69:0a:10:4d:bb:cb:0e:83:ac:86:c0:
ea:e1:ce:fa:c7:ec:13:57:9b:e4:ea:65:93:ef:3d:
cb:e5:26:f3:48:ac:f4:f8:3e:b9:af:5d:e1:52:f1:
5a:e3:6b:3a:78:73:1a:f5:98:af:2d:2c:ce:c1:bd:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/b2oy3bxlMQFed9NtEMlp2GAT2k0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.176.0/22
IPv6:
2a0d:2ac0::/29
Signature Algorithm: sha256WithRSAEncryption
31:41:f6:a4:e5:7b:24:e2:36:d7:4a:7b:66:12:02:d2:8c:2e:
03:12:18:10:26:03:3b:a6:23:7c:3c:79:0e:6e:6b:3a:6b:6a:
b8:92:55:d4:18:b8:a7:9b:be:7f:df:b1:64:b0:38:fb:8b:0e:
cc:c4:77:6b:72:8f:0f:fe:35:4c:0d:2a:5f:60:62:cd:1a:9e:
44:38:78:97:7d:0c:10:80:73:3e:e6:06:dc:28:ff:0c:0d:61:
ab:94:0f:d1:00:cf:d7:9c:5b:96:8a:a8:fb:fd:3b:bb:bf:8c:
82:a9:fe:5b:50:c3:2d:7e:89:c1:19:90:44:8d:5c:87:4a:34:
01:5f:c0:39:92:b9:31:bb:84:82:8e:14:6a:96:89:34:22:2e:
34:72:b9:cc:01:9b:6b:c6:34:21:83:f3:7c:96:67:01:ae:cc:
48:92:6f:36:62:75:f4:fa:83:b5:30:52:67:90:eb:1c:d0:ce:
7d:04:f3:14:ad:e0:d7:32:5f:b2:62:09:28:fe:f9:83:68:6f:
f0:7e:55:8a:e7:30:11:13:65:ba:5f:40:be:a4:a7:b5:3c:b2:
21:ba:d0:f2:2e:ed:28:93:01:9f:a2:f1:2a:30:02:9c:ce:d3:
fe:8e:4a:cf:f0:69:ac:08:6c:6a:f5:9c:a6:18:18:2f:4f:7c:
48:fd:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:29 2024 by rpki-client on console-fra.rpki-client.org